website/lib/auth.php

<?
	/*
		auth.php
		
		Authentication/Authorization function library

		Copyright (C) 2000, 2001 Jeff Teunissen <deek@quakeforge.net>

		This program is free software; you can redistribute it and/or
		modify it under the terms of the GNU General Public License
		as published by the Free Software Foundation; either version 2
		of the License, or (at your option) any later version.

		This program is distributed in the hope that it will be useful,
		but WITHOUT ANY WARRANTY; without even the implied warranty of
		MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  

		See the GNU General Public License for more details.

		You should have received a copy of the GNU General Public License
		along with this program; if not, write to:

		Free Software Foundation, Inc.
		59 Temple Place - Suite 330
		Boston, MA  02111-1307, USA.
	*/
	have ('auth');
	need ('table');

	if (!defined ('_SQLCONSTS_')) {
		define ('_SQLCONSTS_', 1);
		require siteHome . '/../etc/sql.conf';
	}

	global $userInfo;
	global $authRealm;
	global $REMOTE_USER;

/*									SQL definition for member list table
CREATE TABLE members (
   u_key		INT NOT NULL auto_increment PRIMARY KEY,
   u_admin		CHAR DEFAULT 'N' NOT NULL,
   u_username	TINYTEXT DEFAULT '' NOT NULL,
   u_password	TINYTEXT DEFAULT '' NOT NULL,
   u_fullname	TINYTEXT DEFAULT '' NOT NULL,
   u_email		TINYTEXT DEFAULT '' NOT NULL,
   u_phone		TINYTEXT DEFAULT '',
   u_addr1		TINYTEXT DEFAULT '',
   u_addr2		TINYTEXT DEFAULT '',
   u_country	TINYTEXT DEFAULT '',
   u_secret		TINYTEXT,
   u_plan		TEXT DEFAULT ''
);
*/

	/*
		authProcess

		Authenticate user against SQL database
	*/
	function authProcess ($userName, $password)
	{
		$query = "SELECT u_password, 1 AS auth FROM members" .
				" WHERE u_username='$userName'" .
				" AND u_password=ENCRYPT('$password','$userName')";
		$result = @mysql_fetch_array (@mysql_db_query (sqlDB, $query));

		if ($result[auth]) {
			return 1;
		} else {
			return 0;
		}
	}

	/*
		authBasicChallenge

		Use HTTP Basic authentication to ask the user for their UN/PW
	*/
	function authBasicChallenge ($realm, $msg)
	{
		header ('WWW-Authenticate: Basic realm="' . $realm . '"');
		header ('HTTP/1.0 401 Unauthorized');
		die ($msg);
	}

	// Initialization
	if (!$authRealm) {
		$authRealm = "Secure Area";
	}

	if (!isset ($_SERVER['PHP_AUTH_USER'])) {
		authBasicChallenge ($authRealm, "Login required.");
	} else {
		$userName = $_SERVER['PHP_AUTH_USER'];
		$password = $_SERVER['PHP_AUTH_PW'];
	}

	$db = @mysql_connect (sqlHost, sqlUser, sqlPass);

	if ($userName && $password) {
		if (authProcess ($userName, $password) == 0) {
			authBasicChallenge ($authRealm, "Login incorrect.");
		}
	} else {
		authBasicChallenge ($authRealm, "Login incorrect.");
	}
	$_SERVER['REMOTE_USER'] = $REMOTE_USER = $userName;

	$query = "SELECT * FROM members" .
			" WHERE u_username='$userName'";
	$userInfo = @mysql_fetch_assoc (@mysql_db_query (sqlDB, $query));

	@mysql_close ($db);
?>